0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 13:08:40 +08:00
discourse/app
Juan David Martínez Cubillos 7d635130bf
SECURITY: Limit Category search term and word count (#41588)
#### Description

Category search accepted an unbounded term from anonymous requests and
expanded every whitespace-separated word into an ILIKE predicate. Large
terms could generate expensive SQL and tie up request workers.


#### Fix

Cap the total term length and the number of words used for SQL filters.
2026-07-31 19:14:35 -05:00
..
assets DEV: Add a dResizeEdge modifier and adopt it in the docked composer (#42200) 2026-07-31 12:57:25 -03:00
controllers SECURITY: Limit Category search term and word count (#41588) 2026-07-31 19:14:35 -05:00
helpers FEATURE: Allow selection of multiple content languages when viewing topics and posts (#42128) 2026-07-30 12:19:44 +08:00
jobs FIX: Clear disabled/deleted ProblemChecks automatically (#42243) 2026-07-31 21:18:28 +01:00
mailers FEATURE: Log in with a one-time email code (#40804) 2026-06-17 12:34:48 -07:00
models FIX: Clear disabled/deleted ProblemChecks automatically (#42243) 2026-07-31 21:18:28 +01:00
queries/reports DEV: Remove reporting_improvements upcoming change (#41259) 2026-07-01 07:52:02 +08:00
serializers FIX: Gate notification acting_user_name on enable_names setting (#42234) 2026-07-31 14:25:31 -05:00
services FIX: Restrict upcoming-changes toggle to registered upcoming-change settings (#42175) 2026-07-30 09:28:04 -05:00
views FIX: Prevent browsers from restoring stale documents in bfcache mode (#42207) 2026-07-31 17:24:47 +02:00